Deep Malware Analysis of 3ec7d2e887666514c781dd17b3096707 | md5: 3ec7d2e887666514c781dd17b3096707 | ISO9660 Image | LNK | Malicious | LOLBin | T1218: System Binary Proxy Execution | LOLBin:cmd.exe | Execution: CMD in LNK | T1059.003 | T1202: Indirect Command Execution | T1204.002 | PowerShell | T1059.001 | T1027 | DeObfuscated

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	3ec7d2e887666514c781dd17b3096707
Sha1	00bf87903d939b59447d63ae274b8fc8cab3c594
Sha256	dc43888143966d230f80a565839c62f22049f5ea80ab2a36610a0425f72972c2
Sha384	76f786ddabbe4c85327c5ebb43916f662b84b1f6ec646ea4747bd405edf7b70efe5bf6925e9c7b0a88a41a6feb4e5fd1
Sha512	4f54292b468f2ac0b6b07107afe5211826cbdc6ffe294fed24d8f14fe334e526aea06b553c629cd960ce583fef997e83a36e1dc32e64696ecd7cc4da6360db56
SSDeep	384:pJd846ueCeCv8QctQEeBM/7adW+Yaepey:+qFbEQrk
TLSH	B953B50E2C488936E9F96F76F6A90485F34D90C74F606FCD709EA1EC5F9830A4A4C64A

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path img:disk>lnk~T1059.003~T1202~T1204.002~T1218

Shape img:disk>lnk

malicious 2 nodes

Path img:disk>scr:ps1~T1027~T1059.001

Shape img:disk>scr:ps1

malicious 2 nodes

Name	Value
ISO	DiskImage extraction mode: DiscUtils (ISO)

LNK: Command Execution UNKNWOWNmalicious

cmd.exhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential